Elastic Stack

Elastic Stack (ELK Stack) Authentication API

The Authentication API from Elastic Stack (ELK Stack) — 12 operation(s) for authentication.

GitHub OpenAPI
Business capability
Identity & Access Management BC-620.20

Operations 18

Each operation below carries the questions people ask an LLM about it and the instructions they give an agent to run it. Generated by API Evangelist overlay

GET /users/auth Get my authentication info · User authentication information #
Ask an LLM
“Am I currently holding elevated permissions in Elastic Cloud Enterprise?”
“Can I see whether my user has a TOTP device set up?”
Tell an agent
Show my current authentication information.
Tell me whether my session has elevated permissions.
POST /users/auth/_login Log in with a username and password · Login to ECE #
Ask an LLM
“How do I sign in to ECE with a username and password?”
“What does a login request need to return a session token?”
Tell an agent
Log in as {username} with password {password}.
Authenticate user {username} using {password} and login state {login_state}.
POST /users/auth/_logout Log out of the current session · Logout from ECE #
Ask an LLM
“How do I end my current ECE session?”
“Does logging out destroy the session token?”
Tell an agent destructive · confirm first
Log me out.
Destroy my current session.
POST /users/auth/_refresh Refresh my authentication token · Refresh authentication token #
Ask an LLM
“Can I get a new auth token before the current one expires?”
“What call issues a fresh authentication token?”
Tell an agent
Refresh my authentication token.
Issue me a new session token.
GET /users/auth/keys List API keys I can see · Get all API keys #
Ask an LLM
“Which API keys exist that I am allowed to view?”
“Can I page through the API key list?”
Tell an agent
List my API keys.
Show the next page of API keys from {next_page}.
POST /users/auth/keys Create an API key · Create API key #
Ask an LLM
“How do I create a new API key for automation?”
“Can a new API key have an expiration and role assignments?”
Tell an agent
Create an API key described as {description}.
Create an API key {description} that expires in {expiration}.
DELETE /users/auth/keys Delete several of my API keys · Delete API keys #
Ask an LLM
“Can I revoke a batch of API keys in one call?”
“What deletes or invalidates a list of my API keys?”
Tell an agent destructive · confirm first
Delete the API keys {keys}.
Invalidate these API keys at once: {keys}.
GET /users/auth/keys/_all List API keys of all users (deprecated) · Get all API keys for all users #
Ask an LLM
“Can an admin see the API keys belonging to every user?”
“Is the all-users API key listing still supported?”
Tell an agent
List API keys for all users with the deprecated endpoint.
Show every user's API key metadata.
DELETE /users/auth/keys/_all Delete API keys across multiple users · Delete API keys of multiple users #
Ask an LLM
“Can I revoke API keys belonging to several different users in one request?”
“How does an admin invalidate other users' keys in bulk?”
Tell an agent destructive · confirm first
Delete these API keys across users: {user_api_keys}.
Invalidate the multi-user key set {user_api_keys}.
GET /users/auth/keys/{api_key_id} Get one of my API keys · Get API key #
Ask an LLM
“What is the metadata for a particular API key?”
“Can I check when a specific key was created?”
Tell an agent
Get API key {api_key_id}.
Show the metadata for my key {api_key_id}.
DELETE /users/auth/keys/{api_key_id} Delete one of my API keys · Delete API key #
Ask an LLM
“How do I revoke a single API key that leaked?”
“Can I invalidate just one of my keys?”
Tell an agent destructive · confirm first
Delete API key {api_key_id}.
Revoke my key {api_key_id} now.
GET /users/auth/methods List available authentication methods · Available authentication methods #
Ask an LLM
“Which sign-in methods are enabled, like password or SAML?”
“What authentication options does this installation offer?”
Tell an agent
List the available authentication methods.
Show which login options are enabled.
POST /users/auth/saml/_callback Complete SAML sign-in from the identity provider · SAML callback #
Ask an LLM
“What handles the SAML response coming back from my identity provider?”
“Is RelayState needed when completing SAML login?”
Tell an agent
Complete SAML login with response {SAMLResponse}.
Post SAML response {SAMLResponse} with relay state {RelayState}.
GET /users/auth/saml/_init Start SAML single sign-on · Initiate SAML protocol #
Ask an LLM
“How do I kick off SAML single sign-on to my identity provider?”
“Can I choose which SAML realm to redirect to?”
Tell an agent
Start SAML sign-on.
Begin SAML SSO against realm {realm} with state {state}.
GET /users/{user_id}/auth/keys List a user's API keys · Get API key metadata for all keys created by the user #
Ask an LLM
“Which API keys has a particular user created?”
“Can an admin audit the keys one user owns?”
Tell an agent
List the API keys created by user {user_id}.
Audit every key belonging to {user_id}.
DELETE /users/{user_id}/auth/keys Delete all API keys of a user · Delete API keys for a user #
Ask an LLM
“How do I revoke every API key for a user who left?”
“Can I wipe all of one user's keys in a single call?”
Tell an agent destructive · confirm first
Delete all API keys for user {user_id}.
Invalidate every key owned by {user_id}.
GET /users/{user_id}/auth/keys/{api_key_id} Get one API key of a user · Get a user API key #
Ask an LLM
“Can I view a single API key that belongs to another user?”
“What metadata does one user's specific key have?”
Tell an agent
Get API key {api_key_id} of user {user_id}.
Show metadata for user {user_id}'s key {api_key_id}.
DELETE /users/{user_id}/auth/keys/{api_key_id} Delete one API key of a user · Delete an API key for a user #
Ask an LLM
“How does an admin revoke one specific key belonging to another user?”
“Can I invalidate a single key without touching the user's others?”
Tell an agent destructive · confirm first
Delete API key {api_key_id} of user {user_id}.
Revoke user {user_id}'s key {api_key_id}.

Documentation

📖
Documentation
https://www.elastic.co/docs/reference/elasticsearch
📖
APIReference
https://www.elastic.co/docs/api/doc/elasticsearch/
📖
Documentation
https://www.elastic.co/docs/reference/kibana
📖
APIReference
https://www.elastic.co/docs/api/doc/kibana/

Specifications

⚙
OpenAPI
https://raw.githubusercontent.com/api-evangelist/elk-stack/refs/heads/main/openapi/elk-stack-authentication-api-openapi.yml

Other Resources

🔗
SourceCode
https://github.com/elastic/elasticsearch-specification
🔗
SourceCode
https://github.com/elastic/kibana
🔗
ToolCrosswalk
https://raw.githubusercontent.com/api-evangelist/elk-stack/refs/heads/main/mcp/elk-stack-tool-crosswalk.yml

Work with this as data

Every API here is available over the APIs.io API and to AI agents over MCP.

MCP server

One button, every client — Claude, Cursor, VS Code and the rest.

https://apis.io/mcp

Tools for apis

7 MCP tools reach this
  • find_apisBrowse and filter every API in the catalog.
  • get_api_artifactsOne API's artifacts, grouped by type.
  • get_openapiThe primary OpenAPI for this API.
  • find_similar_apisAPIs that look like this one.
  • apis_io_searchSTART HERE — APIs, providers and tags for one query, each with its total.
  • resolveTurn a domain, URL or GitHub org into the provider it belongs to.
  • find_cohortsEvery scored population of providers in the catalog.
All 92 tools →

Call it yourself

curl for this page
This API 
curl "https://apis.io/api/v1/apis/elk-stack:elk-stack-authentication-api"
All apis 
curl "https://apis.io/api/v1/apis?limit=25"

Discovery needs no key. Ratings and market analysis are Pro.

Get an API key

Free tier, no form to fill in. Signing in shares your email address with us — we store it to create your key and to recognise you if you sign in with another provider. See our Privacy Policy and Terms.

GitHub Google LinkedIn

A second provider on the same verified email joins the account you already have.

OpenAPI Specification

elk-stack-authentication-api-openapi.yml Raw ↑ 
openapi: 3.2.0
info:
  version: '1'
  title: Elastic Cloud Enterprise Authentication API
  termsOfService: ''
servers:
- url: https://{{hostname}}/api/v1
security:
- basicAuth: []
- apiKey: []
tags:


# --- truncated at 32 KB (36 KB total) ---
# Full source: https://raw.githubusercontent.com/api-evangelist/elk-stack/refs/heads/main/openapi/elk-stack-authentication-api-openapi.yml